Privacy Policy — Undying Arena

For players and parents — the short version

The game does not ask who you are. There is no sign-up, no account, no name to type, no email address, no password.
We do not collect anything about you. No adverts, no tracking, no analytics, no location, no contacts, no camera, no microphone.
Your game saves on your own device, and if you use iCloud the game also keeps your crystal balance in your own iCloud, so it follows you to your other devices. We never see any of it.
You can play with friends — invite a Game Center friend, or play with someone in the same room. You cannot talk to other players: there is no chat, no messages, and no way to send anything you wrote, picked or photographed. The only things the game shares between players are what is happening in the arena and the name each player already has in Apple's Game Center.
Anything you buy is bought from Apple, with the payment details already on your Apple Account. We never see them. Parents can approve or block every purchase — how to do that.
If you email us for help, we read your email and reply to it. That is the only place we handle anything personal, and we delete it when it is done.

The rest of this page says the same thing in more detail, including the bits the law wants spelled out.

Who we are

Undying Arena is made and published by Glimmerdragon Games, an independent developer based in the United Kingdom. For anything in this policy — a question, a request about your rights, or a complaint — email [email protected].

We are the data controller for the support mailbox described in "If you email us". The Apple services described below are Apple's, under Apple's own policy.

This policy covers the Undying Arena app and this website. It does not cover the App Store itself, Apple's services, or any other site we link to.

What the app collects: nothing

Version 1.0 of Undying Arena sends no personal data to us. That is not a promise about intentions; it is a statement about what is in the app. The game contains no advertising software, no analytics or attribution software, and no crash-reporting service, and we run no server that version 1.0 can contact. The only code in the game that could reach a server of ours is an emergency off-switch for multiplayer, and it is not armed: its address is blank, so it never connects and no request is ever made.

Two things do leave your device, and neither comes to us: the Apple services described in the table below, and — during multiplayer — the game itself, which travels to the other players' devices through Apple's Game Center (see "What Apple handles"). Because of that, there is no profile of you anywhere on our side, nothing to sell, nothing to share with anyone else, and nothing for us to lose in a breach.

What is stored on your device

The game keeps a save file and your settings on your iPhone or iPad. It holds things like which levels and upgrades you have unlocked, your best survival times, your sound and control preferences, and the cosmetic items you own.

That file stays on the device and is never uploaded to us. Deleting the app deletes the copy on the device (press and hold the app icon → Remove App → Delete App). There is nothing to ask us to erase, because we never had a copy. One other copy can exist, and it is yours, not ours: Apple's own device backups include the save, so restoring a device from a backup can bring it back.

A few small records live beside the save, on the device. None of them holds a name, an email or anything you typed — the game has nowhere to type anything — and none of them is ever sent to us:

An account check-code. If you are signed in to iCloud, the game keeps a scrambled check-code worked out from your Apple Account sign-in (a one-way transformation — it cannot be turned back into your account, your email or your name). It lets the game keep two players' crystals separate if two Apple Accounts ever share one device. Next to it the game keeps a second, made-up tag: a random number the game invented itself — not worked out from your account, email or device — with a copy in your iCloud, used only to tell one Apple Account's iCloud from another's, so saves and crystals never mix. Neither identifies you.
Small notes of which Apple Accounts have signed in on this device. When an Apple Account signs in, the game records a note — a copy of Apple's own sign-in token for the game plus a check-code worked out from it — in the iPhone or iPad's own app-settings store, so it can tell a system update apart from a real account switch. There is one note per account that has ever signed in on the device. The notes stay until the app is deleted. The game itself never syncs or sends them anywhere — but they are included in the backups your device makes (an iCloud backup or a backup to your computer), so restoring a device from a backup can bring them back after the app is deleted.
Parked crystals. When someone signs their Apple Account out, their crystal balance is held in a small file beside the save until that account signs back in on the same device. The file is filed under the account check-code above — never a name or email. Next to it, the game keeps a short history — again only check-codes — of which accounts have parked crystals on this device, so it can tell a returning account from a brand-new one. Both stay on the device — the game never syncs or sends them anywhere, and like the notes above they can return when a device backup is restored.
Technical log lines. Like every app, the game writes technical log lines to the device's own system log. We collect none of them — there is no crash reporter and nothing uploads them. A few of the crystal log lines include the first few characters of the account check-code, never the whole code.

If you use the game's share feature to save a picture of your run, iOS asks your permission and then saves that picture to your own photo library. The game never reads your photos and the picture is not sent anywhere.

What Apple handles

Four parts of the game use Apple's own services. In each case the information goes to Apple, under Apple's privacy policy, and not to us. Apple is independently responsible for it.

Apple services used by Undying Arena
Feature	What goes to Apple	What we see
In-app purchases (crystal packs and the starter bundle)	Your purchase is made entirely inside Apple's App Store payment system, using the payment method on your Apple Account.	Only that a purchase of a given item completed on this device, so the app can hand you the item. We never see your card, your bank details, your billing address or your name.
Game Center (achievements and leaderboards) — optional	If you are signed in to Game Center, the game submits your achievements and your survival time to Apple's leaderboards. Your Game Center identity belongs to Apple, not to us.	Nothing is sent to us. We do not receive, store or read Game Center player identities, nicknames or scores. You can sign out in Settings → Game Center and keep playing.
Playing with friends (Game Center multiplayer) — optional	You can play together with friends three ways: invite a Game Center friend, play with someone in the same room (Apple's Game Center finds nearby players over the local network or Bluetooth), or share one of Apple's party codes. Invites, the connection and the match itself all run through Apple's Game Center, between the players' own devices. No game server of ours is involved at any point, and the game never matches you with strangers — you only play with people you or a friend invited. The invite screen shows your Game Center friends list. iOS asks your permission for that (Apple's own one-time prompt) the first time you open it, and the list is read on your device only: the game keeps it in memory while the picker is open, never saves it, and never sends it to us. During a match, what travels between the players' devices is the game itself — positions, actions and results — plus each player's Game Center name, so you can tell who is who. There is no chat, and nothing a player can type, pick or send to another player.	Nothing. We do not run any part of the matchmaking or the match, and no message, friend name or player id from multiplayer ever reaches us. Parents: Apple's Screen Time settings govern all of this — multiplayer can be turned off for a child, and Apple enforces its own age and communication restrictions.
iCloud — your crystal balance, your crystal record and the game's own iCloud tag	The game writes three things into your own iCloud storage, so they follow your Apple Account between your devices: your crystal balance (three numbers — crystals granted, spent and refunded, about two dozen characters); a small record of crystal grants and spends that keeps that balance correct across your devices without crystals being duplicated or lost (kept as two identical copies, so an older version of the game cannot drop rows from it); and the game's own iCloud tag — the made-up random number described under "What is stored on your device", used only to tell one Apple Account's iCloud from another's, so one account's crystals never sync into another's. Each purchase in that record is filed under that purchase's own number from Apple (the number Apple assigned to the transaction when you bought it, so a refund can be taken off the right purchase), and each grant or spend made on a device carries a label the game made up at random when it was installed on that device — a made-up ticket number, not the device's name, serial number or anything about the player — so the record can tell one device's entries from another's without knowing anything about either device. None of it holds anything you typed, because the game has nowhere to type anything.	Nothing. All of it sits in your personal iCloud account, and Apple provides no developer interface through which we could read it — it is outside our reach. What Apple's systems do with iCloud data is described in Apple's privacy policy.

Apple decides how long it keeps this information and how you manage it. Apple's rules for purchases and refunds are in the Media Services Terms and Conditions; Game Center and iCloud are managed in your device's Settings.

What we never do

No adverts, and no advertising identifier (IDFA). The app never asks to track you, because it has nothing to track you with.
No analytics, telemetry, heat maps, session recording or third-party SDKs that collect anything.
No location, contacts, calendar, microphone, camera or health data. The app does not ask for those permissions.
No accounts, logins or passwords. Signing in to Apple's Game Center is Apple's own optional sign-in, and the game adds nothing of its own.
No chat, messages, voice, usernames or user-generated content of any kind. In multiplayer the only things that travel between players are the game state itself and the name each player already has in Apple's Game Center — nothing a player types, picks or sends. So there is nothing to moderate.
No voice data. The story and character voices are pre-recorded audio files shipped inside the app; nothing is recorded, generated or sent from your device.
No selling, renting or sharing of personal data with anyone. We have none to share.
No cookies or trackers on this website. It is plain HTML and one stylesheet, with no JavaScript, no fonts or scripts loaded from other companies, and no analytics — which is why you were not asked to accept anything when you arrived.

If you email us

The support mailbox is the one place where we handle personal data, and only because you chose to write to us.

What: your email address, and whatever you put in your message — please keep that to what is needed to solve the problem.
Why: to answer you and fix the problem.
Our lawful basis under UK GDPR: legitimate interests — running a support service for people who ask us for help. Answering a message you sent is what you would expect and does not override your rights.
Who else sees it: our email provider, which stores the mailbox on our behalf. Nobody else. We do not use a ticketing system, a CRM, a mailing list or any marketing tool, and we will never add you to a newsletter.
How long: only as long as the conversation is useful — normally deleted within about 12 months of the last reply, and sooner if you ask.

You have the right to ask us for a copy of what we hold about you, to have it corrected, to have it deleted, to object to us holding it, or to ask us to restrict how we use it. Email [email protected] and we will do it. Since the only thing we hold is your own email thread, "delete it" is usually a single action and is free.

Children

Undying Arena is rated 13+ on the App Store, for frequent cartoon or fantasy violence and frequent weapons. It is a cartoon game — no blood, no gore, no swearing — but the fighting is the whole game, so it is honestly rated for teenagers and up, not made for young children. It is not published in the App Store's Kids Category.

The game does not knowingly collect personal data from anyone, of any age. There is no sign-up, no name field, no email field, no chat and no advertising, so there is no point at which a child could hand over personal information through the game, and no profile of a child to build on our side. The only way information about a player reaches us is an email you choose to send us yourself — see "If you email us".

Playing with friends. A child can play together with Game Center friends, people in the same room, or players joining with a party code someone shares on purpose. The game has no matchmaking that pairs a child with unknown players. There is no chat, and no way to send words, pictures or anything else between players; the only thing another player ever sees is the name Apple already shows for a player in Game Center. Apple's Screen Time settings can turn multiplayer off for a child, and Apple enforces its own age and communication restrictions regardless of the game.

The game is rated 13+ and not made for young children, but children can still play it, so we have designed it in line with the spirit of the UK's Age Appropriate Design Code (the Children's Code). There is no profiling and no behavioural advertising in the game, and the game carries none of the features we have ruled out permanently: no energy timers, no paid revives, no loot boxes or random paid items, no pay-to-win, and no chat. Purchases buy cosmetic items only; nothing you can buy makes a player stronger.

Parents: every purchase in this game goes through Apple, so Apple's controls work. You can approve each request with Ask to Buy, or switch in-app purchases off entirely with Screen Time — step-by-step instructions.

If you believe a child has sent us personal information by email and you would like it removed, write to [email protected] and we will delete it.

Security

The strongest protection here is structural: data we never receive cannot be leaked. Your save stays on your device under iOS's own protections; purchases run inside Apple's systems; the iCloud copies sit in your account, not ours. The support mailbox is protected by a strong unique password and two-factor authentication.

Where things are

We do not share or sell your personal data, and we hold only one thing: the support email you send us. Our email provider stores that mailbox on our behalf and may keep or back it up outside the UK, under the international-transfer safeguards in its contract with us. Apple's handling of purchases, Game Center and iCloud, including any international storage, is Apple's and is described in Apple's privacy policy.

Changes to this policy

This policy describes version 1.0 of Undying Arena, including playing with friends over Apple's Game Center and the game's iCloud copies of your crystal balance and your crystal record. If a future version changes what leaves your device — for example with a server of ours, or by collecting anything — this policy will be rewritten and republished, and the App Store privacy information updated, before that version is released.

If anything else changes, we will update this page and change the date below. Material changes will also be noted in the App Store release notes for the version that makes them.

Questions and complaints

Please come to us first: [email protected]. We would rather fix it than have you go elsewhere unhappy.

If you are in the UK and you are not satisfied with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, or by phone on 0303 123 1113. You may also complain to the data protection authority in your own country if you are elsewhere. Complaining to the ICO does not cost anything and does not stop you raising it with us as well.

Effective date: 12 October 2026. This page lives at https://undyingarena.glimmerdragon.com/privacy.html.